Analysis
- user interaction
yes - max time kernel
148s - max time network
155s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
07/08/2026, 17:07
Static task
static1
Behavioral task
behavioral1
Sample
Мануал по звездам.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
Мануал по звездам.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
Мануал по звездам.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
Мануал по звездам.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
Мануал по звездам.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
Мануал по звездам.apk
Resource
android-x86-arm-20260325-en
General
- Target Мануал по звездам.apk
- Size 289KB
- Sample260807-vm651asyfs
- SHA256 af2edd53014b39888c253d59fc8fb73612e794ac871322940a8bf4190e593e9a
- MD5 cf02b40430eef908a0486a9e137983d9
- SHA1 a10a578c64275830f4edf4c80eaa839814055aed
- SHA512 f1667ce2006c3edfdea106be9fddfe73a7e7e3f2333a8163e9e0f38b4c53a9317bd2f87be4c7adb6d73968a4d04762649f44d819cfd05a47f8fb3f0a01ee0a05
- SSDEEP 6144:gO+M9y62dTrXGISzuXowmcpVlWWlI9IWCSZajb:gOJEhdTrizDrcDjEIWChjb
- TLSH T10854234B3B481E0DDEDAA33C95CDEBB71A455AE43923C363CD15AAF833817845315A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.product.model com.works.service.v1e7117b1 - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.works.service.v1e7117b1 - Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.MANAGE_UNKNOWN_APP_SOURCES com.works.service.v1e7117b1 - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.works.service.v1e7117b1 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.works.service.v1e7117b1 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.works.service.v1e7117b1
Processes
-
com.works.service.v1e7117b11⤵
- Checks Android system properties for emulator presence.
- Obtains sensitive information copied to the device clipboard
- Requests allowing to install additional applications from unknown sources.
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4391
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.works.service.v1e7117b1/cache/oat_primary/x86_64/base.4391.tmp
- Size 12KB
- SHA256 03eff182bd2d0b1764657749f7f2f65c1c25fb2d6d0c5874c40766a22b343416
- MD5 34bb89ec9a7383f0ec06f6bfb524aa54
- SHA1 f967f33bf59ba75833aa530eeb48bbffbf6718a5
- SHA512 ce1a3beb20419269cce314ad3960b133b14072789c0911e1e92f2b4ebe76e5b1d822f3d7bfcc2dcd58ae3ed6c9025fd08b8f09a64680770e4d9584f018d87963
- SSDEEP 96:K0yzlWESDoX3cB2gPhXmw1yrnbX1WbPnkyzEuWQfmZOq1:jyzllzHcsgPAr71Wb1zEurfIOq1
- TLSH T13142211BD9A36190C0B7ACF7AB8F639CF65FC0791A0D1E6490717B7F9854201EB61E90
- MD5 SHA1 SHA512 SSDEEP TLSH